From c839cee31920afdbb53c0e22e1234d68928ea563 Mon Sep 17 00:00:00 2001 From: didericis Date: Tue, 14 Jul 2026 03:14:56 -0400 Subject: [PATCH] test(orchestrator): skip multitenant isolation under act_runner The test brings up the orchestrator container, which bind-mounts the repo path into a container on the host daemon. Under the Gitea act_runner the job runs in a container sharing the host docker socket, so that path (/workspace/...) doesn't exist on the host daemon and the mount fails ('mkdir /workspace: read-only file system'). Same host-bind-mount constraint that already skips test_sandbox_escape and the other bottle-bringup tests, so gate it the same way (GITEA_ACTIONS). Runs for real on a normal docker host. This unblocks the integration + coverage CI jobs, which failed only because this test errored (coverage.sh runs under set -e; no percentage gate tripped). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01WBMWTEtQdJ4W5UrWuLHCck --- tests/integration/test_multitenant_isolation.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/tests/integration/test_multitenant_isolation.py b/tests/integration/test_multitenant_isolation.py index c2d8e47..7ed3031 100644 --- a/tests/integration/test_multitenant_isolation.py +++ b/tests/integration/test_multitenant_isolation.py @@ -73,6 +73,13 @@ _PROBE_SRC = ( @skip_unless_docker() +@unittest.skipIf( + os.environ.get("GITEA_ACTIONS") == "true", + "skipped under act_runner: the orchestrator container bind-mounts the repo " + "path into a container on the socket-shared host daemon, which can't see the " + "runner's /workspace — same host-bind-mount constraint as the other " + "bottle-bringup integration tests", +) class TestMultitenantIsolation(unittest.TestCase): def setUp(self) -> None: self._tmp = tempfile.TemporaryDirectory()